Advertising

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
808847: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808847
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

--- Begin Message ---

Package: postfix-policyd-spf-python
Severity: important
Dear Maintainer,
I would propose to change the default of
HELO_reject
in /etc/postfix-policyd-spf-python/policyd-spf.conf
to
HELO_reject = Fail
instead of the current
HELO_reject = SPF_Not_Pass
The main problem is that the current option rejects all messages that are
producing a soft-fail, e.g., missing entries with a ?all final entry.
Additionally, rejecting on HELO is non-default but still useful but should not
be more strict then the actual check in
Mail_From_reject
which also defaults (imho correctly) to Fail.
Cheers,
Axel
-- System Information:
Debian Release: 8.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)